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Abstract 

We study the advantage of pure-state quantum computation without entanglement 
over classical computation. For the Deutsch-Jozsa algorithm we present the maximal 
subproblem that can be solved without entanglement, and show that the algorithm 
still has an advantage over the classical ones. We further show that this subproblem 
is of greater significance, by proving that it contains all the Boolean functions whose 
quantum phase-oracle is non-entangling. For Simon's and Grover's algorithms we provide 
simple proofs that no non-trivial subproblems can be solved by these algorithms without 
entanglement. 

1 Introduction 

The fusion of quantum theory and computer science has introduced new capabilities 
to the world of computation and communication. Utilizing these capabilities led to 
some spectacular results: Shor's factorization algorithm X |, Grover's quantum search 
algorithm |5J, Bennett-Brassard's quantum key distribution [3j and quantum teleporta- 
tion all extend beyond well-believed bounds. 

The source of quantum computation power is still debated. Some argue that this 
power arises because unlike classical systems, the state of a multipartite quantum sys- 
tem cannot always be considered as a mere correlated combination of its subsystems. 
Such states are said to be entangled, as opposed to separable states. Entanglement ap- 
pears in most of the great achievements of quantum information theory, from Shor's 
factorization algorithm |T] and other algorithms |5J |5J to quantum teleportation 4;., 
superdense coding [7\, quantum error correction |SJ, and some quantum key distribution 
schemes |§1 1101 ITT] . It is uncontested that entanglement is a key resource of quantum 
computation, or in the words of Michal Horodecki (121 . entanglement is "the corner-stone 
of the quantum information theory" . When no entanglement exists in a pure-state quan- 
tum algorithm, the computation can be simulated efficiently and exactly using classical 
means ^5.. Furthermore, when entanglement exists but its amount is bounded, Jozsa 
and Linden showed 1141 that the computation can still be efficiently simulated classically 
by a coin-tossing algorithm. However, their work does not rule out significant advan- 
tage of quantum computation without entanglement (QCWE) in an oracle-based setting 
(e.g. for the Deutsch-Jozsa algorithm). It also does not rule out exponential advantage 
of mixed-state QCWE over probabilistic classical computation. 

Some cases have been found where even without entanglement, quantum computa- 
tion outperforms classical computation. Collins, Kim and Holton |15| solve the Deutsch- 



Jozsa (DJ) |S] problem without entanglement, but only for n — 2 bits, and prove that 
entanglement is required for any larger n; Braunstein and Pati show that using 
pseudo-pure states, Grover's search problem can be solved without entanglement for 
n < 3 bits more efficiently than classically; Lloyd |17| suggests an entanglement-free 
implementation of Grover's algorithm, but with exponential spatial complexity; Biham, 
Brassard, Kenigsberg and Mor |18| use a non-standard computation model, with a lim- 
itation on the number of allowed queries, to prove a tiny separation for any n in the 
context of Deutsch-Jozsa's and Simon's [Bj problems (with mixed states); Meyer |19| 
notes that Bernstein- Vazirani algorithm |20II21| requires no entanglement, yet uses only 
one oracle call, while the best classical algorithm requires n oracle calls. 

In this paper we investigate the advantage of pure-state QCWE in several quantum 
algorithms. We introduce a restricted version of the Deutsch- Jozsa problem for which 
the algorithm generates no entanglement* . We show that the algorithm still has a signifi- 
cant advantage over the corresponding classical complexity, and prove that this restricted 
problem is maximal, in the sense that any extension of it will generate entanglement. 
This gives some evidence that for the Deutsch- Jozsa problem there is no 'real' expo- 
nential gap between QCWE and exact classical algorithms^. Furthermore, we show the 
significance of this subproblem, and prove that it contains any separability-conserving 
phase-oracle. We then move on to Simon's problem and Grover's algorithm, and show 
that no non-trivial instance of these problems can be solved without entanglement. 

We use the following conventions: the quantum oracle of a Boolean function / : 
{0, 1}" — > {0, 1}, is the black-box unitary operation Uf, which for an (n+ l)-qubit input 
state |a;)|y), outputs \x) \y ffi f(x)). The quantum phase-oracle of /, is the black-box 
unitary operation Vf, which for an n-qubit input state \x), outputs (— l)^ x ^\x). Note 
that when \y) — |— ), Uf functions as a phase-oracle. 



2 Entanglement in the Deutsch-Jozsa Algorithm 

In this section we analyze the occurrence of entanglement in the execution of the Deutsch- 
Jozsa Algorithm. We present a restricted version of the problem, which is entanglement- 
free, maximal, and yet advantageous over the best exact classical algorithm. 



2.1 The Deutsch-Jozsa Algorithm 

Let / be a Boolean function / : {0, l} n — + {0, 1}, with a promise that / is either con- 
stant or balanced, namely, the value of / is either the same for all the members in its 
domain, or it is 1 for exactly half of it and for the other half. The function / is given 
as an oracle, and our goal is to discover whether it is constant or balanced. Note that a 
deterministic classical algorithm that solves this problem must perform 2 n /2 + 1 oracle 
queries. The Deutsch-Jozsa algorithm |Sj, represented by the quantum circuit in Fig- 
ure distinguishes between the two possible types of / using only one quantum query. 



The quantum register is changed by the algorithm steps as follows: 

1. The initial state is |Vo> = |0>®"|1). 

2. After applying n + 1 Hadamard gates: 

xe{o,i}" v v 



*A restricted problem is referred to as a subproblem, i.e., a subset of the legal inputs. In this case, the 
subproblem is a subset of the legal oracles. 
1 However, see open questions in Section l5l 
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Figure 1: The Deutsch-Jozsa algorithm (which is a quantum subroutine common to Simon, 
Grover, Bernstein- Vazirani and other algorithms) 



3. Applying the / quantum query yields: 



xe{o,i}" v " - a/2 
4. Finally, after applying the last n Hadamard gates: 

i*>- E E tS^M- 

ZG{0,1}" a:e{0,l}" V 

The amplitude of |z) = |0}® n in |^ 3 ) is EJ-l)^* 3 l T ■ Thus > if / is constant we obtain 
this state with certainty when measuring \>i>z), and if / is balanced it is certain that some 
other state is measured. It follows that after just one query to the oracle, we are able to 
determine with certainty whether / is constant or balanced. 



2.2 The Deutsch-Jozsa Algorithm without Entanglement 

Bernstein and Vazirani defined a promise problem 20 that can be solved by the Deutsch- 
Jozsa subroutine using a single oracle call. Classically, this problem requires n oracle 
calls. Later, Meyer |19| noted that entanglement is not generated during the execution 
of the algorithm on their problem. Since the BV promise set is a subset of the DJ 
promise set, a corollary from these results is that a subclass of the DJ problem requires 
no entanglement. 

We follow a different route, aiming to find the maximal entanglement-free set. Look- 
ing at the Deutsch-Jozsa algorithm, we note that the only step in which entanglement 
can be generated is the third step, where the / oracle is applied to the quantum reg- 
ister. We define the following restricted DJ promise problem: the function / is again 
either balanced or constant, but it is also promised to be non-entangling for the DJ 
algorithm, i.e., applying the oracle to \ipi) yields a separable state (the state \ip2))- In 
order to solve this promise problem we execute the original algorithm. Since this is a 
sub-problem of the original one, the algorithm's correctness is assured and one quantum 
query is enough to determine whether the function is balanced or constant. Note also 
that if there exist such non-entangling balanced functions (i.e., the constant functions 
are not the only possible non- entangling functions), classical algorithms cannot solve the 
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problem with only one query, and so are inferior compared with the quantum one. 



Definition 2.1 Let F^j be the set of all Boolean functions f : {0, 1}™ — > {0, 1} of the 
following form: 

f(x) = (a-x)®c, (1) 

where a £ {0, 1}", c £ {0, 1} and '■ ' is the inner product modulo 2. For a given c and a, 
we denote the corresponding f by f c<a . 

Proposition 2.2 Any f c>a £ F§j is either constant or balanced. 

Proof. First note that if a = 00 ■ ■ ■ 0, / c , a is constant. For non-zero a the function 
fa,c{x) is balanced. This is clear since the inhomogeneous linear equation system 

a ■ x © c = 

implies one linear constraint over an n-dimensional x, and therefore the solution space 
is (n — l)-dimensional. This means that out of 2™ possible x's, (half) are solutions. 

□ 

Denote by DJ® the "entanglement-free" * Deutsch- Jozsa problem, defined for the set 
F§j instead for any constant /balanced function. 

Proposition 2.3 Entanglement is never generated when executing the Deutsch-Jozsa 
algorithm for DJ® . 

Proof. For an input x — x\X2 ■ ■ ■ x n , we denote by J x the support of x, i.e., the set of 
indexes of nonzero elements in x. Applying the oracle f c>a on j^i) yields: 

(_l)/o,a(*)|^ HQ) _ |1) 



T (-ir(-l)-|z) r |0)-|l) i 



5 y. 

z z e{o,i}" vz 

! _1 X(io) + (-i) ai ii)) • • • (io> + (-ini» [^^] . (2) 



thus for any f c ,a, \ip2) is not entangled. □ 
Having established these properties of DJ®, we would like to show that it is maximal, 
in the sense that it includes any case of separable computation for the Deutsch-Jozsa 
algorithm. 

Proposition 2.4 Any non-entangling balanced function f equals f c ,a for some c £ {0, 1} 
and a £ {0, l} n . 

Proof. Let |V>2) be as defined for the Deutsch-Jozsa algorithm. If / is non-entangling, 
then: 

= e ivo (g) (cos fl fc |0) + e'^ sin 8 k \ 1) ) [ j0) ~ 1 1} ] . (4) 
t — 1 v * 



* Proposition 031 provides the justification for this name. 
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We compare the coefficients of Eqs. and Q. First note that <po must be or n since the 
phase of the state 1 00 • • • 0} is ±1. Suppose that for some 1 < k < n, | cos 9k\ 7^ \ sin 9k\ ■ 
Then the coefficients of the states |00 ■ • ■ 000 ■ • ■ 0} and |00 - • - 010 • • • 0) where the 1 is 
on the fe'th position, are not of the same magnitude, in contradiction. Similarly, if for 
some 1 < k < n, ip k ^ {0, 7r}, then the state 1 00 • ■ • 010 ■ • • 0} where the 1 is on the fc'th 
position, has a complex coefficient, in contradiction. It follows that | -02 ) is a product 
state of exactly the form of Eq. which corresponds to a function f c<a as claimed. □ 
We now show that solving D J® on an exact classical computer is not a trivial task. 

Proposition 2.5 The classical computational complexity o/DJ® is O(n). 

Proof. For a function of the form f(x) — (a ■ x) (B c, one must know all the bits of a in 
order to check whether / is constant or balanced. Even one missing bit can determine 
the function's type either way. An oracle query of / yields an equation of the form 
(a ■ x) © c = b for b £ {0, 1}, which is a linear Boolean equation in n variables: the n bits 
composing a. Therefore, in order to find a out, one must consider at least n equations. 
This means that any classical algorithm will require at least n evaluations of / in order 
to exactly find a. Note also that n evaluations are enough, since the evaluation of /(2 fe ) 
yields the fcth bit of a, so evaluating / on the n powers of 2 will determine it uniquely. 
□ 

Note that much like D J, D J® can be solved with a constant number of oracle queries 
if errors are permitted. 

2.3 General Phase Oracles and DJ® 

We now show that the D J® problem is related to the whole set of separability-conserving 
quantum phase-oracles. 

Definition 2.6 An operation U is separability-conserving, if for any separable state \ip), 
U\ip) is separable. 

Proposition 2.7 Let f : {0, 1}™ —> {0, 1} be a Boolean function and Vf the correspond- 
ing quantum phase-oracle. IfVf is separability-conserving, then f £ Ffjj- 

Proof. A separable state |^} can be written as 

n 

I*) = e l ^0(cos^|O) + e l ^sin^|l)) (5) 

2™-l 

= £ a m \x) (6) 

for some < ifk, Ok < f and a x € C. Note that when cos 8k = or sin 0k ~ 0, we choose 
ifk = without loss of generality. Since V/ 1 \E') is separable too, it holds that: 

2"-l 2"-l 

V f \9) = Yl 5 *l x > = £ (~l) m a x \x) (7) 

71 

= e^°(g)(co S 4|0) +e l ^sin^|l)) (8) 

for some < ifk, 9k < n. Let denote the binary string with 1 in the fcth bit and in 
all the rest. First observe that a x = ±a x for all x and that there must be at least one x 
such that a x ^ 0. For any y, including y = x © eu, a y — ia y , we may write 

a x a x 
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which means that | tan 8k | — | tan 8k j or in other words: 

cos 9k = ± cos 6k , sin 8k — ± sin 8k ■ (9) 

Let J = {k : cosdk = 0} be the set of qubits whose cos 8k is zero, and choose a string y 
so that yk — 1 <4> fc £ J. Note that 

6 y = ±e l ™ cos^fe = (-lyWe*™ cos8 k = a y (-l) m 0. 

fcgj k£J 

From IlfcSjCOS^ = ±11(^.7 cos #fc / Owe obtain e^ = ±e ivo . For j £ J, looking at 

&y<$>ej = e"^' sin 0,- cos # fe 

= (-l) /W e^V^sin^ cos0 fc = a wfflej (-l) /(a:) 

similarly leads to e lipj = ±e lipi . For j £ J we have cos0j = cos8j = and by definition 

tpj = = tpj . 

Having established that cosdk = i cos 8k, sin 9k = ±sin#fc and e %iPk — ±e % ' fk for any 
k, it follows that there exist c, £ {0, 1} such that 

n 

V f \<K) = e'^(-l) c <^(cos8 k \0) + (-l) ak e^ sin0 A |l» 

which is exactly V/ c a |^}. 

Now, it is enough to look at the separable state \^h} = X^£{o i}« \ x )- Since 
the above result applies to any separable state, it also applies to \^h), therefore, there 
exist c and a such that Vf\^! h) = Vf e |^'h). We note that the xih coefficient of Vf\^ h) 
determines f(x) to be (— l)^.*^' since this is exactly the phase added by f c ,a to the state 
\x). Since this is true for all the 2" coefficients, it follows that / = / c , a , thus / £ F§j. 
□ 

In conclusion, we identified the maximal subset of the Deutsch-Jozsa problem, which 
is solved with one quantum query by the Deutsch-Jozsa algorithm without entanglement, 
while the best exact classical algorithm requires a linear number of calls. We showed 
that the significance of this subset reaches beyond the scope of DJ problem: any non- 
entangling phase oracle is an oracle of a function from this subset. Note also that here 
the quantum-to-classical gap in the exact case diminishes from 0(2 n ):0(I) to 0(n):0(l). 
This is the price we pay for not using entanglement. 

We remark that it can now be seen that the function set of |20l I19| contains exactly 
half of the possible non-entangling functions. 

2.4 Separable Implementation of the Oracle 

It may be claimed that even though there is no entanglement after any step in the 
algorithm, the oracle must use entanglement during the computation of the function. We 
show here that there is an entanglement-free implementation for the oracle. Consider 
the following transformation: 

n 

k>-(-i) c+1 ®(-ir , "*i^> 
i=i 
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It is easy to see that the tensor product on the right-hand side gives exactly the requested 
result of applying f c<a on input \x), i.e., (— iy c > a |a;). The oracle operation can be done 
locally, using n single-qubit transformations such as 

1 \ 

e i*iUW J > 

where £(t) ascends from to 2n, maintaining separability even in continuous time. 



3 Simon's Problem 

Simon presented |H] the following oracle problem: 

Let / : {0, l} n -> {0, 1}" be a 2-to-l function 5 , such that 

Mx^y: f(x) = f(y) <^y = x($a, 

where a is a fixed n-bit string called the function's period, and © is the bitwise XOR 
operation. The goal is to determine the value of a. 

In order to solve this problem classically with high probability, the oracle must be 
queried an exponential number of times. However, the following quantum procedure 
solves it with high probability using a polynomial number of queries. 

1. The initial state is \i> ) = |0}® n |0)® n . 

2. After applying n Hadamard gates on the first n qubits: 

hw = i e i*>i°r- 

VZ xe{0,l}» 

3. Applying the quantum oracle / yields: 

4. We now measure the last n qubits and obtain a certain /(a?o) £ {0, 1}" , resulting 
in the (n-qubit) state: 

|-03> = -pOo) + \x ©a}). 
v2 

5. Applying n Hadamard gates on the n qubits yields: 

\^) - £ [(-ir-» + (-i) ( " oeo) -"]iw> 

»e{o,i}™ 

a-y — 

6. Measure \ip4) to get a y such that a ■ y = 0. 

Repeating steps 1-6 a polynomial number of times will, with high probability, result 
in n linearly-independent values {3/1,3/2, ■ • • ,y n } such that 3/j • a = 0, which determines 
a. 

Proposition 3.1 Any instance of the Simon problem generates entanglement in Simon's 
algorithm. 

§In some versions it is also allowed to be constant. 
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Proof. To see this, it suffices to examine \tp2}- We show that if it is separable, f(x) 
must be constant, and therefore it is a trivial case of the problem. Observe that in \ip2), 
the first n qubits assume any of their possible values exactly once in the sum. In order 
to achieve this state from a tensor product of 2n qubits, each of the first n qubits must 
be of the form a|0) + with a, f3 7^ 0. It can therefore be written as: 

m = ( £ 7«i*>)®( E *»!»>)• 

a;G{0,l}" !/e{0,l}" 

However, the state of the first n qubits already contributes 2 n different elements to the 
final sum, no matter in what state the last n qubits are. This means that in order to have 
exactly 2" elements in the final sum, the last n qubits must be in a single computational 
basis element. Thus, the value of f(x) is the same for any input, i.e. it is constant. □ 
We thus conclude that the usage of the Simon algorithm for any subproblem of the 
Simon problem requires entanglement. However, an interesting open question in this 
context, is whether there is a restricted version of the problem solvable by some other 
quantum algorithm without entanglement, and achieves an advantage over the classical 
case. 

4 Grover's Search Algorithm 

Grover presented an algorithm 2 , which for a binary function / : {0, I}" — > {0, 1}, finds 
an x such that f(x) = 1 with only 0(\/2™) oracle calls. 

The first step of the algorithm is identical to the Deutsch-Jozsa subroutine: 

We require that the resulting state {\tjJ2)) will be separable. In the following we show 
that this may be true only for trivial instances of the search problems and therefore we 
do not need to follow additional steps of the algorithm. From the separability of \tp2) 
it follows that if the n — 1 most significant bits are measured, the state of the least 
significant bit is independent of the measurement outcome. Writing x = w0 or x — wl 
depending on the value of the LSB, |t/> 2 ) = l/VNJ2 w \(-l) f(w0) \wQ) + 
and performing the measurement, we are left with the state 

(-1)/("*»|0) + 
Up to a global phase, the state is 

and has to be independent of the measured w. That means that Va: : (— Ij^WW 191 ' = k, 
or more conveniently put as Va; : f(x) f(x © 1) = y • e\. Similarly, entanglement should 
also be avoided when regarding the jth qubit for 1 < j < n, which leads to 

Vx,j : f{x)® f{x®e 3 ) = yej. 

This means that it is true for a couple of ji's combined 

fix © e 3 ) + f{x © ej © et) = y ■ a fix) © f(x © e, © e<) = y ■ a © y ■ e. 
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In the same manner, we can see that for every J it holds that 

Vx : f(x) f(x® J)=y J 

even for x — 0. From this follows that functions that do not generate entanglement must 
satisfy 

f{J) = y Je/(0), 

which is the exact definition of the set F§j. These functions correspond to trivial search 
problems where none, all, or half of the elements are to be found. Hence, any interesting 
instance of Grover's search problem would generate entanglement in Grover's algorithm. 

One may confirm that this is true even for n = 2 bits, regardless of the fact that only 
a single oracle call is required in that case, and unlike what is commented by |16l . With 
two bits, = i [|00> + |01) + 1 10} + |11}]. If only one of {00,01, 10, 11} is "marked", 
then \ip2) has 3 positive coefficients and a single negative coefficient. This means that 
1^2} = -A|00) + S|01} + C| 10) + D\ll) is entangled, as it cannot satisfy the separability 
constraint AD = BC. 

5 Summary and Open Questions 

We investigated the advantage of quantum algorithms without entanglement over clas- 
sical algorithms, and showed a maximal entanglement-free subproblem of the Deutsch- 
Jozsa problem, which yields an O(l) to 0(n) quantum advantage over the best exact 
classical algorithm. Due to this ban on entanglement, the exponential advantage of 
exact-quantum versus exact-classical is lost. For the Simon problem we showed that any 
non-trivial subproblem requires entanglement during the computation. Using a some- 
what different approach, we showed that this also holds for Grover's algorithm. 

Further research on the role of entanglement in quantum information processing may 
illuminate some of the following questions: is there a restricted form of the Simon problem 
(or more generally of the hidden subgroup problem \22\). and a corresponding quantum 
algorithm that presents a quantum advantage without entanglement? Is there a subprob- 
lem larger than DJ® and a corresponding algorithm (not the DJ algorithm) that solves 
it without entanglement, and yet has an advantage over any classical algorithm? Can 
there be a non-negligible advantage of QCWE over classical computation when separable 
mixed states are used? Can it be proved that exponential advantage of exact QCWE 
over classical-exact computation is impossible in oracle-based settings? Note that this 
is not known yet, even for the Deutsch-Jozsa problem, since there may be some other 
quantum procedure for which the QCWE advantage holds, and the subset is larger than 
p® 
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